CSS Image Replacement Being Used As Phishing Tool on MySpace?
Tuesday, June 12th, 2007
SecurityFocus recently reported that the number of page views garnered by fraudulent sites climbed by a factor of five in March and April, fueled by a phishing scheme targeting MySpace users.
Nature of the Attack
According to the report:
The attack used a modification to the style sheet of a user’s profile to place a transparent image over the page, causing a click on a link — or anywhere else on the page — to redirect the visitor to a fake MySpace login page…
While a MySpace account does not have any intrinsic monetary value, phishers had come up with ways to monetize this attack… We observed hijacked accounts being used to spread bulletin board spam for some advertising revenue. -Colin Whittaker of Google’s Anti-Phishing Team
I was browsing through a couple of Web sites earlier to check for software updates when suddenly, a word struck me- ASCII. ASCII is simply a character encoding based on the English alphabet. When graphical representations are made out of it, ASCII art is produced. I remembered a film I watched a year ago entitled, 
It all began when a schedule was set to fix intermittent downtime on Xyzzy’s cable Internet connection. To his amazement, the technician sat down at his laptop and started checking if his connection is already fixed. Apparently, the technician used a Web browser and opened a URL that’s exclusively used by his company. He then logged on to the page (using his username and password) to check his customer’s status. Afterwards, he closed the browser window and confirmed that the connection was already fixed.
Secunia reported 
